TemplatesGet a demo →Book a meeting
Blog
ConnectFoundations

AI-Ready Data: A Practical Checklist Before Your First AI Agent

In short

AI-ready data is information, including documents, that an AI system can find, trust and use safely for a specific person. It is findable, current, permissioned, owned, consistently defined and connected to the system of record. For agents, readiness means knowing which version is authoritative and who may see it, not only having clean tables.

Key takeaways

  • AI-ready data is findable, current, permissioned, owned, defined and connected for the use case at hand.
  • It differs from analytics-ready data because documents count as data, permissions apply per asker, and freshness matters per answer.
  • The common blockers are scans, duplicates, conflicting versions, missing owners and permissions that are lost when files are copied.
  • Each criterion has a test you can run in an afternoon, such as asking about a restricted folder as a non-member.
  • Start with one use case and a representative sample, sort every failure, fix the top two and widen from there.

AI-ready data is data, including documents, that an AI system can find, trust and use safely on behalf of a specific person: current, permissioned, owned, consistently defined and connected to the systems where work happens. For analytics, "ready" meant clean tables; for knowledge assistants and AI agents it also means knowing which version is authoritative and who is allowed to see it.

That second half is where most organizations are surprised. A data team can have an excellent warehouse and still be nowhere near ready for its first AI agent, because the agent will not only read the warehouse. It will read the procedure in SharePoint, the contract in a shared drive, the exception someone granted in a Slack thread, and the ticket history in the service desk. None of that was ever prepared for a machine to answer from.

This is a practical checklist for getting there, written for the people who own the knowledge as much as for the people who own the pipelines.

What does AI-ready data mean?

AI-ready data means your information meets six conditions for the use case in front of you. It is findable (the system can locate it), current (the authoritative version is identifiable), permissioned (access rules travel with it), owned (someone answers for it), defined (key terms mean one thing), and connected (it is reachable from the system of record, not a stale copy).

None of those ideas is new. Research data management has worked for years from the FAIR principles, which ask that data be findable, accessible, interoperable and reusable, with machine-readable metadata. What changes with AI is the audience. A person reading a document can notice that it is three years old, or that it was obviously meant for someone else. A model will not, unless the data carries that context with it.

Why it matters

An AI system answers with the confidence of whatever it retrieves. If an out-of-date procedure and the current one look equally valid, it will quote either. Data readiness for AI is mostly about making the right version, and the right audience, unmistakable.

How is AI-ready data different from analytics-ready data?

Analytics readiness is about tables: consistent schemas, deduplicated records, reliable pipelines. All of that still matters. But AI for knowledge and agents adds three demands analytics rarely had to meet.

Documents count as data. Most of what an assistant answers from is unstructured: policies, contracts, runbooks, emails, scanned forms. A dashboard never had to read a scanned PDF.

Permissions are per person. A dashboard is usually built for an audience. An AI answer is built for one asker, at query time, and must only draw on what that person could open themselves.

Freshness is per answer. A monthly report can tolerate a nightly load. An agent approving an invoice against a superseded policy cannot.

That is why AI data readiness belongs as much to knowledge owners, legal and operations as to the data team.

Who owns AI data readiness?

In most organizations, nobody, which is the real problem. The data team owns pipelines and the warehouse. IT owns SharePoint and its permission groups. Each department owns its own procedures, usually informally, through whoever wrote them last. Legal owns retention and holds.

A workable split is simple. The data or platform team owns the connections, the freshness of the index and the permission model. Each business area owns the content in its collections: which version is authoritative, which documents should be retired, and whether an answer is right. Security owns the rules about what may be connected at all. Write those three responsibilities down before the first collection goes live, because every later fix will need to know whose job it is.

The six criteria of AI-ready data

Findable

The content exists in a known place, is machine-readable, and carries enough metadata (type, owner, date, scope) to be retrieved for the right question. A procedure that exists only as a photo attached to an email is not findable, however important it is.

Current

For every topic, one version is authoritative and the others are marked as drafts, archives or superseded. Deletions at the source actually remove content from wherever AI reads it.

Permissioned

Each document carries its source access rules into the AI system, and those rules are applied when a question is asked, not filtered afterwards. Our deep dive on connectors that preserve permissions shows what that takes in practice.

Owned

Every collection has a named owner who can confirm an answer is right and fix it when it is not. Unowned content is the main reason knowledge bases decay.

Defined

Business terms such as "active customer", "net revenue" or "closed incident" have one agreed definition, with an owner and a formula. Without that, two correct-sounding answers can disagree. A semantic layer is how that agreement becomes something a system can apply.

Connected

The AI reads from the system of record through a live connection, not from an export someone made last quarter. If an agent will act, the write path exists, is scoped, and is separate from read access.

AI-ready data checklist

Use this as a working checklist for one use case at a time. Each row has a test you can run in an afternoon and the usual fix.

Criterion Test Fix if it fails
Findable Pick ten real user questions. Can you locate the source document for each within five minutes? Consolidate the collection; make scans machine-readable; add type, owner and date metadata
Findable What share of the sample is scanned or image-only? Run OCR and table extraction before indexing, and check the output on a few documents by hand
Current For your ten most-used procedures, is exactly one version marked authoritative? Archive or label superseded copies; set a version policy per source
Current Delete a test document at the source. Does it disappear from the AI's answers? Use connectors with change feeds or a scheduled full sweep
Permissioned Index a restricted folder, then ask about it as a non-member. Do you get nothing? Use connectors that copy access lists at ingestion and fail closed when unsure
Permissioned Are source access rights actually correct today? Review and clean group memberships before connecting; AI will enforce whatever is there
Owned Does each collection have a named owner with time to review answers? Assign owners per collection, not per platform
Defined Do two departments give the same number for the same metric? Agree definitions for the 20 most contested terms, with formula and owner
Connected Is the AI reading live sources or a one-off export? Connect the system of record directly
Connected If an agent writes back, is write access granted separately? Split read and write scopes; make write revocable

What are the most common blockers to AI-ready data?

The same five show up in almost every organization, and none of them is exotic.

  1. Scans and images. Policies signed and scanned, forms photographed on a phone, tables pasted as pictures. Text extraction must come before anything else, and its quality needs checking on real samples.
  2. Duplicates. The same file saved to four team sites, each slightly edited. Retrieval then returns near-identical passages and the answer depends on which copy ranked first.
  3. Conflicting versions. Not duplicates, but genuine disagreement: last year's travel policy and this year's, both live, neither marked. This is the single fastest way to lose users' trust.
  4. Missing owners. Content that nobody will vouch for. When an answer is wrong, there is no one to tell and nothing gets fixed.
  5. Permissions that don't survive copying. A document exported from a restricted site into a "shared knowledge" folder loses its original audience. Any pipeline that copies files rather than carrying their access lists turns a confidential document into a public one.

Regulation is moving in the same direction. The European Commission's summary of the EU AI Act lists high-quality datasets and logging of activity among the obligations for high-risk systems. Even where your use case is not high-risk, those are reasonable defaults.

How do you make data AI-ready? Start with a sample

The instinct is to fix everything before starting. Resist it. You will not know which problems matter until a real system meets real questions.

  1. Choose one use case and one collection. For example, the HR policies behind new-starter questions, or the procedures one operations team uses daily. Our guide to building an internal knowledge base suggests good first collections.
  2. Pick a representative sample. Include the mess: scans, long PDFs, old versions. Leave out what your rules would not let you share yet; what to share in a RAG trial covers where to draw that line.
  3. Collect real questions. Ask a handful of future users from different roles for the questions they actually ask.
  4. Run the checklist on the sample. Test findability, versions, permissions and definitions against those questions.
  5. Sort every failure. Is it a missing document, a wrong version, a permission problem, an undefined term or a parsing error? The pattern tells you where to invest.
  6. Fix the top two, then widen the sample. Readiness is iterative; each round makes the next collection faster.

If you want a broader view first, an AI readiness assessment scores data alongside knowledge, systems, governance and people, and the AI Readiness Scorecard does it in about five minutes.

How SphereIQ handles data readiness

Some of the checklist is organizational work no software does for you: agreeing definitions, naming owners, cleaning access rights. The rest should be handled by the platform. In SphereIQ, Connect captures source permissions with every record at ingestion, redacts secrets, and keeps content current through change-data-capture and incremental sync, with 200+ connectors. The Company Brain adds document intelligence (parsing, OCR and table extraction), a semantic layer where each canonical term has a formula, grain and owner, configurable version policies per source, and cited answers, so a wrong answer points straight at the document that needs fixing.

That last point is the quiet benefit of citations. Every answer becomes a data-quality report. When users can see which document an answer came from, they tell you which documents are wrong, and readiness stops being a one-off project and becomes a habit.

Frequently asked questions

What is AI-ready data?
AI-ready data is information an AI system can locate, trust and use safely on behalf of a particular person. In practice that means it is machine-readable and findable, the authoritative version is clear, access rules travel with it, someone owns it, business terms are defined consistently, and it is read from the live system of record rather than an old export.
How do I know if my data is ready for AI?
Test it against real questions. Take ten questions future users actually ask and check whether you can find the source for each, whether one version is clearly authoritative, whether a restricted document stays hidden from a non-member, and whether two departments agree on the key numbers. Where those tests fail, your data is not yet ready for that use case.
What is the difference between AI-ready data and analytics-ready data?
Analytics-ready data focuses on clean, consistent tables and reliable pipelines for reporting. AI-ready data adds unstructured documents such as policies, contracts and tickets, enforces permissions for each individual asker at query time, and needs the current version of every source, because an assistant or agent acts on a single answer rather than an aggregate report.
Do we need to clean all our data before starting with AI?
No. Start with one use case and a representative sample of the documents behind it, including the messy ones. Run the checklist against real user questions, sort every failure by cause, and fix the two most common problems. Then widen the sample. Trying to clean everything first usually means fixing problems that never mattered.
Why do permissions matter for AI-ready data?
Because an AI answer is built for one person at a time. If documents lose their access rules when they are copied or indexed, an assistant can answer one employee with content written for another. AI-ready data carries each source's access list into the AI system and applies it when the question is asked, failing closed whenever access cannot be confirmed.

Run the checklist on a sample of your own documents.

In a walkthrough we connect a small, representative sample, query a restricted source as a non-member, and show which documents answer well and which need work.